Privacy Policy
Last updated: March 21, 2026
1. Who We Are
ViralPulse (“we,” “us,” “our”) is operated from Canada. We run the ViralPulse platform (“the Platform”), a TikTok viral video discovery and AI script generation service. This Privacy Policy explains how we collect, use, store, and protect your personal data.
2. Data We Collect
2.1 Information You Provide
- Account data: email address, full name, and profile avatar when you create an account
- Onboarding data: your niche selection, tracked keywords, content description, and optionally your TikTok username
- Script feedback: thumbs up/down ratings and style tags you provide on generated scripts
- Payment data:processed securely by Stripe — we receive a transaction reference and confirmation but never your full card number or bank details
2.2 Information Collected Automatically
- Usage data: pages viewed, features used, scripts generated, and discovery feed interactions
- Device data: IP address, browser type, operating system, and language preferences
- Cookies: authentication session tokens and theme preferences (see Cookies section below)
- Bot protection data: Cloudflare Turnstile collects device signals on signup and login forms to distinguish real users from automated traffic
2.3 Information Derived from Your Content
- Voice profile data: if you provide your TikTok username, we analyze your publicly available videos to derive style characteristics including tone, vocabulary, sentence structure, hook patterns, and emoji usage. This is used solely to personalize your generated scripts.
3. How We Use Your Data
We use your personal data to:
- Create and maintain your account, authenticate sessions, and manage your subscription
- Populate your discovery feed with TikTok outlier videos matching your tracked keywords and niches
- Build and maintain your voice profile for personalized script generation (only if you provide your TikTok username)
- Generate AI-powered scripts tailored to your voice and content style
- Process subscription payments and manage billing
- Send transactional emails: account verification, password resets, and welcome messages
- Improve the Platform through aggregated, anonymized usage analytics
- Improve script quality using your anonymized feedback (ratings and style tags)
We do not sell your personal data. We do not use your data for third-party advertising.
4. Voice Profiling and Content Analysis
Voice profiling is a core feature of ViralPulse and requires your explicit consent:
- Voice profiling is optional. You can skip providing your TikTok username during onboarding and still use the Platform.
- If you opt in, we scrape your publicly available TikTok videos, extract transcripts, and analyze your speaking and writing style to build a voice profile.
- Voice profiles are automatically refreshed weekly to keep your style data current.
- You can remove your TikTok username and delete your voice profile at any time from your settings.
- Voice profile data is stored securely and is only accessible to you. It is never shared with other users or third parties.
5. Third-Party Service Providers
We use trusted third-party services to operate the Platform:
- Supabase(US East) — authentication, database hosting, and real-time data
- Stripe— payment processing. Stripe handles all payment data under PCI DSS compliance.
- Vercel(US East) — application hosting and edge delivery
- RapidAPI / TikTok API23— fetching publicly available TikTok video metadata for outlier scoring
- Apify— extracting transcripts from public TikTok videos
- Deepgram— speech-to-text fallback for transcript extraction
- OpenAI— AI script generation and voice style analysis
- Resend— transactional email delivery
- Inngest— background job processing
- Cloudflare Turnstile— bot protection on forms
These providers process data on our behalf and are contractually required to protect it. We do not share your personal data beyond what is necessary to operate and secure the Platform.
7. Data Retention
- Active accounts: all data retained indefinitely while your subscription is active
- Cancelled accounts: data retained for 90 days after your subscription ends, then permanently deleted
- Voice profiles: deleted immediately when you remove your TikTok username or delete your account
- Generated scripts: retained as long as your account is active
- Payment records: retained as required by financial record-keeping regulations
- Account deletion: available in settings with type-to-confirm. Triggers permanent removal of all your data after the 90-day retention period.
8. Your Rights
You have the following rights regarding your personal data:
- Access: request a copy of the personal data we hold about you
- Correction: request correction of inaccurate data
- Deletion: request deletion of your data (subject to legal retention obligations) or delete your account directly from settings
- Export: request your data in a structured, machine-readable format
- Withdrawal of consent: withdraw consent for voice profiling at any time by removing your TikTok username
Under PIPEDA (Canada) and applicable US state laws (including CCPA for California residents), you may have additional rights. To exercise any rights, email us at privacy@viralpulse.io. We will respond within 30 days.
9. Data Security
- All data in transit is encrypted using TLS (HTTPS)
- Database access is restricted by row-level security policies — users can only access their own data
- Authentication sessions use secure, HTTP-only cookies
- Passwords are hashed using industry-standard algorithms
- Payment processing is handled entirely by Stripe (PCI DSS compliant)
- Bot protection via Cloudflare Turnstile on all authentication forms
While we take every reasonable precaution, no system is completely immune to security threats. We will notify affected users promptly in the event of a data breach.
10. International Transfers
ViralPulse is operated from Canada. Your data is stored and processed in the United States (Supabase US East, Vercel US East). By using the Platform, you consent to the transfer of your data to the US, where it is protected by our service providers’ security measures and contractual obligations.
11. Children’s Privacy
The Platform is not intended for anyone under the age of 13, consistent with TikTok’s minimum age requirement and COPPA. We do not knowingly collect personal data from children under 13. If we become aware that we have collected data from someone under 13, we will delete it promptly.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on the Platform. The “last updated” date at the top reflects the most recent revision.
13. Contact
For privacy questions or to exercise your data rights, contact us at privacy@viralpulse.io.